@glassly/engine 0.1.0-dev.0

package/build/services/LocalMiniappStorage.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Phone-local SimpleStorage for bundled miniapps.
+ *
+ * Keys are scoped to the stable Glassly user id and package name. Access tokens
+ * must never be part of the namespace: Core access tokens rotate and are held
+ * in memory only, so using one makes every app restart look like a new user.
+ */
+export interface LocalMiniappStorageBackend {
+    get(key: string): unknown | null;
+    has(key: string): boolean;
+    set(key: string, value: unknown): void;
+    remove(key: string): void;
+    keys(): string[];
+}
+export interface LocalMiniappStorageHooks {
+    getUserId: () => Promise<string>;
+    backend: LocalMiniappStorageBackend;
+}
+export declare class LocalMiniappStorage {
+    private readonly hooks;
+    constructor(hooks: LocalMiniappStorageHooks);
+    get(packageName: string, key: string): Promise<unknown | null>;
+    set(packageName: string, key: string, value: unknown): Promise<void>;
+    delete(packageName: string, key: string): Promise<void>;
+    keys(packageName: string): Promise<string[]>;
+    clear(packageName: string): Promise<void>;
+    has(packageName: string, key: string): Promise<boolean>;
+    getAll(packageName: string): Promise<Record<string, string>>;
+    setMultiple(packageName: string, values: Record<string, unknown>): Promise<void>;
+    private prefix;
+}
+//# sourceMappingURL=LocalMiniappStorage.d.ts.map

package/build/services/LocalMiniappStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalMiniappStorage.d.ts","sourceRoot":"","sources":["../../src/services/LocalMiniappStorage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,0BAA0B;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;IACtC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,IAAI,IAAI,MAAM,EAAE,CAAA;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IAChC,OAAO,EAAE,0BAA0B,CAAA;CACpC;AAID,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,wBAAwB;IAEtD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAI9D,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQ5C,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvD,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAY5D,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;YAOxE,MAAM;CAKrB"}

package/build/services/LocalMiniappStorage.js

@@ -0,0 +1,66 @@
+/**
+ * Phone-local SimpleStorage for bundled miniapps.
+ *
+ * Keys are scoped to the stable Glassly user id and package name. Access tokens
+ * must never be part of the namespace: Core access tokens rotate and are held
+ * in memory only, so using one makes every app restart look like a new user.
+ */
+const KEY_ROOT = "localstorage_";
+export class LocalMiniappStorage {
+    hooks;
+    constructor(hooks) {
+        this.hooks = hooks;
+    }
+    async get(packageName, key) {
+        return this.hooks.backend.get((await this.prefix(packageName)) + key);
+    }
+    async set(packageName, key, value) {
+        this.hooks.backend.set((await this.prefix(packageName)) + key, value);
+    }
+    async delete(packageName, key) {
+        this.hooks.backend.remove((await this.prefix(packageName)) + key);
+    }
+    async keys(packageName) {
+        const prefix = await this.prefix(packageName);
+        return this.hooks.backend
+            .keys()
+            .filter((key) => key.startsWith(prefix))
+            .map((key) => key.slice(prefix.length));
+    }
+    async clear(packageName) {
+        const prefix = await this.prefix(packageName);
+        for (const key of this.hooks.backend.keys()) {
+            if (key.startsWith(prefix))
+                this.hooks.backend.remove(key);
+        }
+    }
+    async has(packageName, key) {
+        return this.hooks.backend.has((await this.prefix(packageName)) + key);
+    }
+    async getAll(packageName) {
+        const prefix = await this.prefix(packageName);
+        const values = {};
+        for (const key of this.hooks.backend.keys()) {
+            if (!key.startsWith(prefix))
+                continue;
+            if (!this.hooks.backend.has(key))
+                continue;
+            const value = this.hooks.backend.get(key);
+            values[key.slice(prefix.length)] = typeof value === "string" ? value : String(value ?? "");
+        }
+        return values;
+    }
+    async setMultiple(packageName, values) {
+        const prefix = await this.prefix(packageName);
+        for (const [key, value] of Object.entries(values)) {
+            this.hooks.backend.set(prefix + key, value ?? null);
+        }
+    }
+    async prefix(packageName) {
+        const userId = (await this.hooks.getUserId()).trim();
+        if (!userId)
+            throw new Error("Glassly user identity is unavailable");
+        return `${KEY_ROOT}${userId}_${packageName}_`;
+    }
+}
+//# sourceMappingURL=LocalMiniappStorage.js.map

package/build/services/LocalMiniappStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalMiniappStorage.js","sourceRoot":"","sources":["../../src/services/LocalMiniappStorage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,MAAM,QAAQ,GAAG,eAAe,CAAA;AAEhC,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,KAA+B;QAA/B,UAAK,GAAL,KAAK,CAA0B;IAAG,CAAC;IAEhE,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,GAAW;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,GAAW,EAAE,KAAc;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,GAAW;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO;aACtB,IAAI,EAAE;aACN,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aACvC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,WAAmB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,GAAW;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC7C,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAQ;YACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACzC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;QAC5F,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,MAA+B;QACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,WAAmB;QACtC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACpD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACpE,OAAO,GAAG,QAAQ,GAAG,MAAM,IAAI,WAAW,GAAG,CAAA;IAC/C,CAAC;CACF","sourcesContent":["/**\n * Phone-local SimpleStorage for bundled miniapps.\n *\n * Keys are scoped to the stable Glassly user id and package name. Access tokens\n * must never be part of the namespace: Core access tokens rotate and are held\n * in memory only, so using one makes every app restart look like a new user.\n */\n\nexport interface LocalMiniappStorageBackend {\n  get(key: string): unknown | null\n  has(key: string): boolean\n  set(key: string, value: unknown): void\n  remove(key: string): void\n  keys(): string[]\n}\n\nexport interface LocalMiniappStorageHooks {\n  getUserId: () => Promise<string>\n  backend: LocalMiniappStorageBackend\n}\n\nconst KEY_ROOT = \"localstorage_\"\n\nexport class LocalMiniappStorage {\n  constructor(private readonly hooks: LocalMiniappStorageHooks) {}\n\n  async get(packageName: string, key: string): Promise<unknown | null> {\n    return this.hooks.backend.get((await this.prefix(packageName)) + key)\n  }\n\n  async set(packageName: string, key: string, value: unknown): Promise<void> {\n    this.hooks.backend.set((await this.prefix(packageName)) + key, value)\n  }\n\n  async delete(packageName: string, key: string): Promise<void> {\n    this.hooks.backend.remove((await this.prefix(packageName)) + key)\n  }\n\n  async keys(packageName: string): Promise<string[]> {\n    const prefix = await this.prefix(packageName)\n    return this.hooks.backend\n      .keys()\n      .filter((key) => key.startsWith(prefix))\n      .map((key) => key.slice(prefix.length))\n  }\n\n  async clear(packageName: string): Promise<void> {\n    const prefix = await this.prefix(packageName)\n    for (const key of this.hooks.backend.keys()) {\n      if (key.startsWith(prefix)) this.hooks.backend.remove(key)\n    }\n  }\n\n  async has(packageName: string, key: string): Promise<boolean> {\n    return this.hooks.backend.has((await this.prefix(packageName)) + key)\n  }\n\n  async getAll(packageName: string): Promise<Record<string, string>> {\n    const prefix = await this.prefix(packageName)\n    const values: Record<string, string> = {}\n    for (const key of this.hooks.backend.keys()) {\n      if (!key.startsWith(prefix)) continue\n      if (!this.hooks.backend.has(key)) continue\n      const value = this.hooks.backend.get(key)\n      values[key.slice(prefix.length)] = typeof value === \"string\" ? value : String(value ?? \"\")\n    }\n    return values\n  }\n\n  async setMultiple(packageName: string, values: Record<string, unknown>): Promise<void> {\n    const prefix = await this.prefix(packageName)\n    for (const [key, value] of Object.entries(values)) {\n      this.hooks.backend.set(prefix + key, value ?? null)\n    }\n  }\n\n  private async prefix(packageName: string): Promise<string> {\n    const userId = (await this.hooks.getUserId()).trim()\n    if (!userId) throw new Error(\"Glassly user identity is unavailable\")\n    return `${KEY_ROOT}${userId}_${packageName}_`\n  }\n}\n"]}

package/build/services/LocalMiniappUserIdentity.d.ts

@@ -0,0 +1,41 @@
+export interface LocalMiniappUserIdentityBackend {
+    get(): string | null;
+    set(userId: string): void;
+    remove(): void;
+}
+/**
+ * Prefix marking an id that was minted on-device rather than issued by Core.
+ * Core ids are opaque, so the prefix is what lets a later sign-in recognise a
+ * local namespace and decide whether to migrate or abandon it.
+ */
+export declare const LOCAL_USER_ID_PREFIX = "local_";
+/** True for ids minted by {@link LocalMiniappUserIdentity.resolveLocal}. */
+export declare function isLocalUserId(userId: string): boolean;
+/**
+ * Keeps the stable Glassly user id available to local miniapps across process
+ * restarts. The id is non-secret and is deliberately stored separately from
+ * the short-lived Core access token.
+ */
+export declare class LocalMiniappUserIdentity {
+    private readonly backend;
+    private current;
+    constructor(backend: LocalMiniappUserIdentityBackend);
+    resolve(resolveOnline: () => Promise<string>): Promise<string>;
+    /**
+     * Namespace for when Core can never answer — the user has turned Glassly
+     * cloud off in Privacy settings, so there is no client to exchange a token
+     * with and {@link resolve} would throw forever.
+     *
+     * Storage still needs *a* stable namespace: local miniapps (maps, captions)
+     * are offline-capable by design and only break because `prefix()` has no id
+     * to scope keys with. The minted id is device-local, non-secret, and
+     * persisted through the same backend, so it survives restarts exactly like a
+     * Core id. A cached Core id always wins, so flipping cloud off does not
+     * strand data written while signed in.
+     */
+    resolveLocal(): string;
+    get(): string | null;
+    remember(userId: string): void;
+    forget(): void;
+}
+//# sourceMappingURL=LocalMiniappUserIdentity.d.ts.map

package/build/services/LocalMiniappUserIdentity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalMiniappUserIdentity.d.ts","sourceRoot":"","sources":["../../src/services/LocalMiniappUserIdentity.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,+BAA+B;IAC9C,GAAG,IAAI,MAAM,GAAG,IAAI,CAAA;IACpB,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,MAAM,IAAI,IAAI,CAAA;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,WAAW,CAAA;AAE5C,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;GAIG;AACH,qBAAa,wBAAwB;IAGvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,OAAO,CAAsB;gBAER,OAAO,EAAE,+BAA+B;IAE/D,OAAO,CAAC,aAAa,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAUpE;;;;;;;;;;;OAWG;IACH,YAAY,IAAI,MAAM;IAStB,GAAG,IAAI,MAAM,GAAG,IAAI;IAQpB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAO9B,MAAM,IAAI,IAAI;CAIf"}

package/build/services/LocalMiniappUserIdentity.js

@@ -0,0 +1,73 @@
+/**
+ * Prefix marking an id that was minted on-device rather than issued by Core.
+ * Core ids are opaque, so the prefix is what lets a later sign-in recognise a
+ * local namespace and decide whether to migrate or abandon it.
+ */
+export const LOCAL_USER_ID_PREFIX = "local_";
+/** True for ids minted by {@link LocalMiniappUserIdentity.resolveLocal}. */
+export function isLocalUserId(userId) {
+    return userId.startsWith(LOCAL_USER_ID_PREFIX);
+}
+/**
+ * Keeps the stable Glassly user id available to local miniapps across process
+ * restarts. The id is non-secret and is deliberately stored separately from
+ * the short-lived Core access token.
+ */
+export class LocalMiniappUserIdentity {
+    backend;
+    current = null;
+    constructor(backend) {
+        this.backend = backend;
+    }
+    async resolve(resolveOnline) {
+        const available = this.get();
+        if (available)
+            return available;
+        const resolved = (await resolveOnline()).trim();
+        if (!resolved)
+            throw new Error("Glassly user identity is unavailable");
+        this.remember(resolved);
+        return resolved;
+    }
+    /**
+     * Namespace for when Core can never answer — the user has turned Glassly
+     * cloud off in Privacy settings, so there is no client to exchange a token
+     * with and {@link resolve} would throw forever.
+     *
+     * Storage still needs *a* stable namespace: local miniapps (maps, captions)
+     * are offline-capable by design and only break because `prefix()` has no id
+     * to scope keys with. The minted id is device-local, non-secret, and
+     * persisted through the same backend, so it survives restarts exactly like a
+     * Core id. A cached Core id always wins, so flipping cloud off does not
+     * strand data written while signed in.
+     */
+    resolveLocal() {
+        const available = this.get();
+        if (available)
+            return available;
+        const minted = `${LOCAL_USER_ID_PREFIX}${Date.now().toString(36)}${Math.random().toString(36).slice(2, 10)}`;
+        this.remember(minted);
+        return minted;
+    }
+    get() {
+        if (this.current)
+            return this.current;
+        const cached = this.backend.get()?.trim() ?? "";
+        if (!cached)
+            return null;
+        this.current = cached;
+        return cached;
+    }
+    remember(userId) {
+        const resolved = userId.trim();
+        if (!resolved)
+            throw new Error("Glassly user identity is unavailable");
+        this.backend.set(resolved);
+        this.current = resolved;
+    }
+    forget() {
+        this.current = null;
+        this.backend.remove();
+    }
+}
+//# sourceMappingURL=LocalMiniappUserIdentity.js.map

package/build/services/LocalMiniappUserIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalMiniappUserIdentity.js","sourceRoot":"","sources":["../../src/services/LocalMiniappUserIdentity.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAA;AAE5C,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAA;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IAGN;IAFrB,OAAO,GAAkB,IAAI,CAAA;IAErC,YAA6B,OAAwC;QAAxC,YAAO,GAAP,OAAO,CAAiC;IAAG,CAAC;IAEzE,KAAK,CAAC,OAAO,CAAC,aAAoC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;QAE/B,MAAM,QAAQ,GAAG,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC/C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACtE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACvB,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,YAAY;QACV,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;QAE/B,MAAM,MAAM,GAAG,GAAG,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;QAC5G,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACrB,OAAO,MAAM,CAAA;IACf,CAAC;IAED,GAAG;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAA;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,OAAO,MAAM,CAAA;IACf,CAAC;IAED,QAAQ,CAAC,MAAc;QACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACtE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAA;IACzB,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA;IACvB,CAAC;CACF","sourcesContent":["export interface LocalMiniappUserIdentityBackend {\n  get(): string | null\n  set(userId: string): void\n  remove(): void\n}\n\n/**\n * Prefix marking an id that was minted on-device rather than issued by Core.\n * Core ids are opaque, so the prefix is what lets a later sign-in recognise a\n * local namespace and decide whether to migrate or abandon it.\n */\nexport const LOCAL_USER_ID_PREFIX = \"local_\"\n\n/** True for ids minted by {@link LocalMiniappUserIdentity.resolveLocal}. */\nexport function isLocalUserId(userId: string): boolean {\n  return userId.startsWith(LOCAL_USER_ID_PREFIX)\n}\n\n/**\n * Keeps the stable Glassly user id available to local miniapps across process\n * restarts. The id is non-secret and is deliberately stored separately from\n * the short-lived Core access token.\n */\nexport class LocalMiniappUserIdentity {\n  private current: string | null = null\n\n  constructor(private readonly backend: LocalMiniappUserIdentityBackend) {}\n\n  async resolve(resolveOnline: () => Promise<string>): Promise<string> {\n    const available = this.get()\n    if (available) return available\n\n    const resolved = (await resolveOnline()).trim()\n    if (!resolved) throw new Error(\"Glassly user identity is unavailable\")\n    this.remember(resolved)\n    return resolved\n  }\n\n  /**\n   * Namespace for when Core can never answer — the user has turned Glassly\n   * cloud off in Privacy settings, so there is no client to exchange a token\n   * with and {@link resolve} would throw forever.\n   *\n   * Storage still needs *a* stable namespace: local miniapps (maps, captions)\n   * are offline-capable by design and only break because `prefix()` has no id\n   * to scope keys with. The minted id is device-local, non-secret, and\n   * persisted through the same backend, so it survives restarts exactly like a\n   * Core id. A cached Core id always wins, so flipping cloud off does not\n   * strand data written while signed in.\n   */\n  resolveLocal(): string {\n    const available = this.get()\n    if (available) return available\n\n    const minted = `${LOCAL_USER_ID_PREFIX}${Date.now().toString(36)}${Math.random().toString(36).slice(2, 10)}`\n    this.remember(minted)\n    return minted\n  }\n\n  get(): string | null {\n    if (this.current) return this.current\n    const cached = this.backend.get()?.trim() ?? \"\"\n    if (!cached) return null\n    this.current = cached\n    return cached\n  }\n\n  remember(userId: string): void {\n    const resolved = userId.trim()\n    if (!resolved) throw new Error(\"Glassly user identity is unavailable\")\n    this.backend.set(resolved)\n    this.current = resolved\n  }\n\n  forget(): void {\n    this.current = null\n    this.backend.remove()\n  }\n}\n"]}

package/build/services/LocalSttFallbackCoordinator.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Decides whether on-device Sherpa STT should produce transcripts for local
+ * miniapps, instead of (or in addition to) cloud transcription. Local STT is
+ * active when the cloud is unavailable (disconnected or refusing STT for plan
+ * quota) or any subscription requires `forceLocal`.
+ *
+ * Activation flips `localSttFallbackActive` in the settings store, which
+ * the bluetooth-sdk native side reads to decide whether to feed PCM into
+ * the SherpaOnnxTranscriber. Local transcripts then flow back through the
+ * `local_transcription` Bridge event; the host wires that event to
+ * `localMiniappRuntime.forwardEvent`, with this coordinator providing the
+ * subscription-active gate so we never publish transcripts to miniapps that
+ * aren't asking for them. LocalMiniappRuntime filters mixed local/cloud
+ * delivery per miniapp.
+ */
+/**
+ * Why local STT is currently active, mirrored into the
+ * `local_stt_fallback_reason` setting ("" while inactive) so UI can show it.
+ * When several causes hold at once, the primary-path outage wins over
+ * `force_local` (a forced subscription would keep local STT on either way).
+ */
+export type LocalSttFallbackReason = "force_local" | "cloud_disconnected" | "cloud_disabled" | "stt_quota" | "provider_unreachable";
+declare class LocalSttFallbackCoordinator {
+    private static instance;
+    private hasTranscriptionSubscription;
+    private hasForceLocalSubscription;
+    private activeLanguage;
+    /**
+     * Default to "cloud is up" so we never accidentally activate local STT before
+     * the cloud client has had a chance to start. We attach lazily on the first
+     * subscription/reconcile pass; once attached, this field reflects the real
+     * cloud-client runtime status.
+     */
+    private cloudConnected;
+    private localActive;
+    private cloudAdapterAttached;
+    /**
+     * Soniox-direct (user API key) state, pushed by SonioxDirectService. While
+     * enabled, IT is the primary transcription path — cloud connectivity is
+     * irrelevant and sherpa engages on Soniox health instead. Defaults healthy
+     * for the same reason cloudConnected defaults true: never activate local STT
+     * before the primary has had a chance to come up.
+     */
+    private sonioxDirectEnabled;
+    private sonioxDirectHealthy;
+    /**
+     * Cloud STT refused for plan quota (`stream.quota` blocked=true). The cloud
+     * connection stays up, so this is tracked separately from `cloudConnected`:
+     * for transcription purposes the cloud path is down, and sherpa takes over
+     * if its model is on-device. Soniox-direct is unmetered and unaffected.
+     */
+    private sttQuotaBlocked;
+    private constructor();
+    /**
+     * Lazy-attach the engine cloud connection listener. The coordinator is
+     * constructed at module load, before engine.start() brings up the cloud
+     * client, so we defer until the first reconcile.
+     */
+    private attachCloudAdapterIfReady;
+    static getInstance(): LocalSttFallbackCoordinator;
+    isActive(): boolean;
+    getActiveLanguage(): string | null;
+    /** The cause of the current activation, or null while inactive. */
+    getReason(): LocalSttFallbackReason | null;
+    onSubscriptionChange(hasTranscription: boolean, language: string | null, hasForceLocal?: boolean): void;
+    /**
+     * Informational hook, retained for API stability. No longer called: the
+     * authoritative switching signal is the cloud-client adapter (local miniapps
+     * are powered only by V2). v1 cloud transcripts deliberately do NOT drive this
+     * coordinator anymore. Kept for future hysteresis if connection-state alone
+     * proves too coarse.
+     */
+    onCloudTranscript(): void;
+    /**
+     * Pushed when the cloud announces/clears an STT quota block. Awaitable so
+     * the caller can inspect `isActive()` afterwards to phrase its user notice
+     * ("continuing on-device" vs "transcription paused").
+     */
+    onSttQuotaBlockedChange(blocked: boolean): Promise<void>;
+    isSttQuotaBlocked(): boolean;
+    /** Pushed by SonioxDirectService on every enable/health transition. */
+    onSonioxDirectStateChange(enabled: boolean, healthy: boolean): void;
+    /** Whether the primary transcription path (Soniox-direct when a user key is
+     *  set, the cloud otherwise) is up. */
+    private primaryUp;
+    private reconcile;
+    /**
+     * Ranks the concurrent causes: a dead-forever cloud path first, then the
+     * primary provider's own failure, then transient outages, with `force_local`
+     * only when the primary is actually up. Mirrors `primaryUp()`.
+     */
+    private currentReason;
+    private publishReason;
+    private startLocalStt;
+    private stopLocalStt;
+    private shouldUseLocalStt;
+    private log;
+}
+declare const localSttFallbackCoordinator: LocalSttFallbackCoordinator;
+export default localSttFallbackCoordinator;
+//# sourceMappingURL=LocalSttFallbackCoordinator.d.ts.map

package/build/services/LocalSttFallbackCoordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalSttFallbackCoordinator.d.ts","sourceRoot":"","sources":["../../src/services/LocalSttFallbackCoordinator.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;GAcG;AACH;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAC9B,aAAa,GACb,oBAAoB,GACpB,gBAAgB,GAChB,WAAW,GACX,sBAAsB,CAAA;AAE1B,cAAM,2BAA2B;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA6B;IAEpD,OAAO,CAAC,4BAA4B,CAAQ;IAC5C,OAAO,CAAC,yBAAyB,CAAQ;IACzC,OAAO,CAAC,cAAc,CAAsB;IAC5C;;;;;OAKG;IACH,OAAO,CAAC,cAAc,CAAO;IAC7B,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,oBAAoB,CAAQ;IACpC;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB,CAAQ;IACnC,OAAO,CAAC,mBAAmB,CAAO;IAClC;;;;;OAKG;IACH,OAAO,CAAC,eAAe,CAAQ;IAE/B,OAAO;IASP;;;;OAIG;IACH,OAAO,CAAC,yBAAyB;IAajC,MAAM,CAAC,WAAW,IAAI,2BAA2B;IAOjD,QAAQ,IAAI,OAAO;IAInB,iBAAiB,IAAI,MAAM,GAAG,IAAI;IAIlC,mEAAmE;IACnE,SAAS,IAAI,sBAAsB,GAAG,IAAI;IAI1C,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,aAAa,UAAQ,GAAG,IAAI;IAQrG;;;;;;OAMG;IACH,iBAAiB,IAAI,IAAI;IAEzB;;;;OAIG;IACG,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D,iBAAiB,IAAI,OAAO;IAI5B,uEAAuE;IACvE,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAQnE;2CACuC;IACvC,OAAO,CAAC,SAAS;YAWH,SAAS;IAcvB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,aAAa;YAQP,aAAa;IA0B3B,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,GAAG;CAGZ;AAED,QAAA,MAAM,2BAA2B,6BAA4C,CAAA;AAC7E,eAAe,2BAA2B,CAAA"}

package/build/services/LocalSttFallbackCoordinator.js

@@ -0,0 +1,210 @@
+import BluetoothSdk from "@glassly/bluetooth-sdk/internal";
+import { ISLAND_SETTINGS_KEYS } from "../runtime/config";
+import { useSettingsStore } from "../stores/settings";
+import { cloudClientService } from "./CloudClientService";
+import sttModelManager from "./STTModelManager";
+class LocalSttFallbackCoordinator {
+    static instance;
+    hasTranscriptionSubscription = false;
+    hasForceLocalSubscription = false;
+    activeLanguage = null;
+    /**
+     * Default to "cloud is up" so we never accidentally activate local STT before
+     * the cloud client has had a chance to start. We attach lazily on the first
+     * subscription/reconcile pass; once attached, this field reflects the real
+     * cloud-client runtime status.
+     */
+    cloudConnected = true;
+    localActive = false;
+    cloudAdapterAttached = false;
+    /**
+     * Soniox-direct (user API key) state, pushed by SonioxDirectService. While
+     * enabled, IT is the primary transcription path — cloud connectivity is
+     * irrelevant and sherpa engages on Soniox health instead. Defaults healthy
+     * for the same reason cloudConnected defaults true: never activate local STT
+     * before the primary has had a chance to come up.
+     */
+    sonioxDirectEnabled = false;
+    sonioxDirectHealthy = true;
+    /**
+     * Cloud STT refused for plan quota (`stream.quota` blocked=true). The cloud
+     * connection stays up, so this is tracked separately from `cloudConnected`:
+     * for transcription purposes the cloud path is down, and sherpa takes over
+     * if its model is on-device. Soniox-direct is unmetered and unaffected.
+     */
+    sttQuotaBlocked = false;
+    constructor() {
+        // Reset the persisted mirror flag on boot — the in-memory state in this
+        // coordinator is the source of truth, and a stale "true" left from the
+        // previous session would cause native to feed Sherpa before any miniapp
+        // registered a subscription.
+        useSettingsStore.getState().setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackActive, false);
+        useSettingsStore.getState().setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackReason, "");
+    }
+    /**
+     * Lazy-attach the engine cloud connection listener. The coordinator is
+     * constructed at module load, before engine.start() brings up the cloud
+     * client, so we defer until the first reconcile.
+     */
+    attachCloudAdapterIfReady() {
+        if (this.cloudAdapterAttached)
+            return;
+        this.cloudConnected = cloudClientService.isConnected();
+        cloudClientService.onStatusChanged((status) => {
+            const connected = status.status === "connected";
+            if (this.cloudConnected === connected)
+                return;
+            this.log(`cloud connection -> ${connected ? "up" : "down"}`);
+            this.cloudConnected = connected;
+            void this.reconcile();
+        });
+        this.cloudAdapterAttached = true;
+    }
+    static getInstance() {
+        if (!LocalSttFallbackCoordinator.instance) {
+            LocalSttFallbackCoordinator.instance = new LocalSttFallbackCoordinator();
+        }
+        return LocalSttFallbackCoordinator.instance;
+    }
+    isActive() {
+        return this.localActive;
+    }
+    getActiveLanguage() {
+        return this.activeLanguage;
+    }
+    /** The cause of the current activation, or null while inactive. */
+    getReason() {
+        return this.localActive ? this.currentReason() : null;
+    }
+    onSubscriptionChange(hasTranscription, language, hasForceLocal = false) {
+        this.log(`onSubscriptionChange(hasTx=${hasTranscription}, lang=${language}, forceLocal=${hasForceLocal})`);
+        this.hasTranscriptionSubscription = hasTranscription;
+        this.hasForceLocalSubscription = hasTranscription && hasForceLocal;
+        this.activeLanguage = hasTranscription ? language : null;
+        void this.reconcile();
+    }
+    /**
+     * Informational hook, retained for API stability. No longer called: the
+     * authoritative switching signal is the cloud-client adapter (local miniapps
+     * are powered only by V2). v1 cloud transcripts deliberately do NOT drive this
+     * coordinator anymore. Kept for future hysteresis if connection-state alone
+     * proves too coarse.
+     */
+    onCloudTranscript() { }
+    /**
+     * Pushed when the cloud announces/clears an STT quota block. Awaitable so
+     * the caller can inspect `isActive()` afterwards to phrase its user notice
+     * ("continuing on-device" vs "transcription paused").
+     */
+    async onSttQuotaBlockedChange(blocked) {
+        if (this.sttQuotaBlocked === blocked)
+            return;
+        this.log(`stt quota -> ${blocked ? "blocked" : "restored"}`);
+        this.sttQuotaBlocked = blocked;
+        await this.reconcile();
+    }
+    isSttQuotaBlocked() {
+        return this.sttQuotaBlocked;
+    }
+    /** Pushed by SonioxDirectService on every enable/health transition. */
+    onSonioxDirectStateChange(enabled, healthy) {
+        if (this.sonioxDirectEnabled === enabled && this.sonioxDirectHealthy === healthy)
+            return;
+        this.log(`soniox-direct -> enabled=${enabled} healthy=${healthy}`);
+        this.sonioxDirectEnabled = enabled;
+        this.sonioxDirectHealthy = healthy;
+        void this.reconcile();
+    }
+    /** Whether the primary transcription path (Soniox-direct when a user key is
+     *  set, the cloud otherwise) is up. */
+    primaryUp() {
+        // Cloud turned off in Privacy settings: the cloud path is not merely down,
+        // it is never coming back, so on-device STT is the primary. Checked ahead
+        // of `cloudConnected` because that field defaults to true (so local STT
+        // doesn't pre-empt cloud at boot) and would otherwise report a path that
+        // will never connect as up. Soniox-direct is a user-supplied third-party
+        // key, not Glassly cloud, so it stays available.
+        if (!this.sonioxDirectEnabled && cloudClientService.isCloudDisabled())
+            return false;
+        return this.sonioxDirectEnabled ? this.sonioxDirectHealthy : this.cloudConnected && !this.sttQuotaBlocked;
+    }
+    async reconcile() {
+        this.attachCloudAdapterIfReady();
+        const shouldBeActive = this.shouldUseLocalStt();
+        if (shouldBeActive && !this.localActive) {
+            await this.startLocalStt();
+        }
+        else if (!shouldBeActive && this.localActive) {
+            this.stopLocalStt(this.hasTranscriptionSubscription ? "primary transcription recovered" : "subscription gone");
+        }
+        else if (shouldBeActive && this.localActive) {
+            // Still active, but the cause may have shifted (e.g. quota block landing
+            // while already offline for a disconnect) — keep the mirror current.
+            this.publishReason();
+        }
+    }
+    /**
+     * Ranks the concurrent causes: a dead-forever cloud path first, then the
+     * primary provider's own failure, then transient outages, with `force_local`
+     * only when the primary is actually up. Mirrors `primaryUp()`.
+     */
+    currentReason() {
+        if (!this.sonioxDirectEnabled && cloudClientService.isCloudDisabled())
+            return "cloud_disabled";
+        if (this.sonioxDirectEnabled && !this.sonioxDirectHealthy)
+            return "provider_unreachable";
+        if (!this.sonioxDirectEnabled && !this.cloudConnected)
+            return "cloud_disconnected";
+        if (!this.sonioxDirectEnabled && this.sttQuotaBlocked)
+            return "stt_quota";
+        return "force_local";
+    }
+    publishReason() {
+        const reason = this.localActive ? this.currentReason() : "";
+        const store = useSettingsStore.getState();
+        if (store.getSetting(ISLAND_SETTINGS_KEYS.localSttFallbackReason) !== reason) {
+            store.setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackReason, reason);
+        }
+    }
+    async startLocalStt() {
+        this.log("starting local stt");
+        const modelAvailable = await sttModelManager.isModelAvailable();
+        if (!modelAvailable) {
+            this.log("local stt model is not available yet — skipping activation");
+            return;
+        }
+        if (!this.shouldUseLocalStt()) {
+            this.log("local stt activation skipped: routing changed before start completed");
+            return;
+        }
+        try {
+            // Direct btsdk call now (was a host restartTranscriber hook).
+            await BluetoothSdk.restartTranscriber();
+        }
+        catch (err) {
+            this.log(`restartTranscriber failed: ${err}`);
+        }
+        if (!this.shouldUseLocalStt()) {
+            this.log("local stt activation skipped: routing changed during transcriber restart");
+            return;
+        }
+        useSettingsStore.getState().setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackActive, true);
+        this.localActive = true;
+        this.publishReason();
+    }
+    stopLocalStt(reason) {
+        this.log(`stopping local stt: ${reason}`);
+        useSettingsStore.getState().setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackActive, false);
+        this.localActive = false;
+        this.publishReason();
+    }
+    shouldUseLocalStt() {
+        return this.hasTranscriptionSubscription && (this.hasForceLocalSubscription || !this.primaryUp());
+    }
+    log(msg) {
+        console.log(`[LocalSttFallback] ${msg}`);
+    }
+}
+const localSttFallbackCoordinator = LocalSttFallbackCoordinator.getInstance();
+export default localSttFallbackCoordinator;
+//# sourceMappingURL=LocalSttFallbackCoordinator.js.map

package/build/services/LocalSttFallbackCoordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalSttFallbackCoordinator.js","sourceRoot":"","sources":["../../src/services/LocalSttFallbackCoordinator.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,iCAAiC,CAAA;AAC1D,OAAO,EAAC,oBAAoB,EAAC,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAC,kBAAkB,EAAC,MAAM,sBAAsB,CAAA;AACvD,OAAO,eAAe,MAAM,mBAAmB,CAAA;AA8B/C,MAAM,2BAA2B;IACvB,MAAM,CAAC,QAAQ,CAA6B;IAE5C,4BAA4B,GAAG,KAAK,CAAA;IACpC,yBAAyB,GAAG,KAAK,CAAA;IACjC,cAAc,GAAkB,IAAI,CAAA;IAC5C;;;;;OAKG;IACK,cAAc,GAAG,IAAI,CAAA;IACrB,WAAW,GAAG,KAAK,CAAA;IACnB,oBAAoB,GAAG,KAAK,CAAA;IACpC;;;;;;OAMG;IACK,mBAAmB,GAAG,KAAK,CAAA;IAC3B,mBAAmB,GAAG,IAAI,CAAA;IAClC;;;;;OAKG;IACK,eAAe,GAAG,KAAK,CAAA;IAE/B;QACE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,6BAA6B;QAC7B,gBAAgB,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAA;QAC1F,gBAAgB,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAA;IACzF,CAAC;IAED;;;;OAIG;IACK,yBAAyB;QAC/B,IAAI,IAAI,CAAC,oBAAoB;YAAE,OAAM;QACrC,IAAI,CAAC,cAAc,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAA;QACtD,kBAAkB,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,EAAE;YAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,KAAK,WAAW,CAAA;YAC/C,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;gBAAE,OAAM;YAC7C,IAAI,CAAC,GAAG,CAAC,uBAAuB,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;YAC5D,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;YAC/B,KAAK,IAAI,CAAC,SAAS,EAAE,CAAA;QACvB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;IAClC,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,CAAC;YAC1C,2BAA2B,CAAC,QAAQ,GAAG,IAAI,2BAA2B,EAAE,CAAA;QAC1E,CAAC;QACD,OAAO,2BAA2B,CAAC,QAAQ,CAAA;IAC7C,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED,mEAAmE;IACnE,SAAS;QACP,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,CAAC;IAED,oBAAoB,CAAC,gBAAyB,EAAE,QAAuB,EAAE,aAAa,GAAG,KAAK;QAC5F,IAAI,CAAC,GAAG,CAAC,8BAA8B,gBAAgB,UAAU,QAAQ,gBAAgB,aAAa,GAAG,CAAC,CAAA;QAC1G,IAAI,CAAC,4BAA4B,GAAG,gBAAgB,CAAA;QACpD,IAAI,CAAC,yBAAyB,GAAG,gBAAgB,IAAI,aAAa,CAAA;QAClE,IAAI,CAAC,cAAc,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;QACxD,KAAK,IAAI,CAAC,SAAS,EAAE,CAAA;IACvB,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,KAAU,CAAC;IAE5B;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,OAAgB;QAC5C,IAAI,IAAI,CAAC,eAAe,KAAK,OAAO;YAAE,OAAM;QAC5C,IAAI,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;QAC5D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAA;QAC9B,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;IACxB,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,eAAe,CAAA;IAC7B,CAAC;IAED,uEAAuE;IACvE,yBAAyB,CAAC,OAAgB,EAAE,OAAgB;QAC1D,IAAI,IAAI,CAAC,mBAAmB,KAAK,OAAO,IAAI,IAAI,CAAC,mBAAmB,KAAK,OAAO;YAAE,OAAM;QACxF,IAAI,CAAC,GAAG,CAAC,4BAA4B,OAAO,YAAY,OAAO,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAA;QAClC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAA;QAClC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAA;IACvB,CAAC;IAED;2CACuC;IAC/B,SAAS;QACf,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,kBAAkB,CAAC,eAAe,EAAE;YAAE,OAAO,KAAK,CAAA;QACnF,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,eAAe,CAAA;IAC3G,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,yBAAyB,EAAE,CAAA;QAChC,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAC/C,IAAI,cAAc,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;QAC5B,CAAC;aAAM,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;QAChH,CAAC;aAAM,IAAI,cAAc,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9C,yEAAyE;YACzE,qEAAqE;YACrE,IAAI,CAAC,aAAa,EAAE,CAAA;QACtB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,kBAAkB,CAAC,eAAe,EAAE;YAAE,OAAO,gBAAgB,CAAA;QAC9F,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAAE,OAAO,sBAAsB,CAAA;QACxF,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,oBAAoB,CAAA;QAClF,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,WAAW,CAAA;QACzE,OAAO,aAAa,CAAA;IACtB,CAAC;IAEO,aAAa;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAA;QACzC,IAAI,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,sBAAsB,CAAC,KAAK,MAAM,EAAE,CAAC;YAC7E,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;QAC9B,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,gBAAgB,EAAE,CAAA;QAC/D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAA;YACtE,OAAM;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAA;YAChF,OAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,8DAA8D;YAC9D,MAAM,YAAY,CAAC,kBAAkB,EAAE,CAAA;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAA;YACpF,OAAM;QACR,CAAC;QACD,gBAAgB,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAA;QACzF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,aAAa,EAAE,CAAA;IACtB,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,IAAI,CAAC,GAAG,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAA;QACzC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAA;QAC1F,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QACxB,IAAI,CAAC,aAAa,EAAE,CAAA;IACtB,CAAC;IAEO,iBAAiB;QACvB,OAAO,IAAI,CAAC,4BAA4B,IAAI,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;IACnG,CAAC;IAEO,GAAG,CAAC,GAAW;QACrB,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAA;IAC1C,CAAC;CACF;AAED,MAAM,2BAA2B,GAAG,2BAA2B,CAAC,WAAW,EAAE,CAAA;AAC7E,eAAe,2BAA2B,CAAA","sourcesContent":["import BluetoothSdk from \"@glassly/bluetooth-sdk/internal\"\nimport {ISLAND_SETTINGS_KEYS} from \"../runtime/config\"\nimport {useSettingsStore} from \"../stores/settings\"\nimport {cloudClientService} from \"./CloudClientService\"\nimport sttModelManager from \"./STTModelManager\"\n\n/**\n * Decides whether on-device Sherpa STT should produce transcripts for local\n * miniapps, instead of (or in addition to) cloud transcription. Local STT is\n * active when the cloud is unavailable (disconnected or refusing STT for plan\n * quota) or any subscription requires `forceLocal`.\n *\n * Activation flips `localSttFallbackActive` in the settings store, which\n * the bluetooth-sdk native side reads to decide whether to feed PCM into\n * the SherpaOnnxTranscriber. Local transcripts then flow back through the\n * `local_transcription` Bridge event; the host wires that event to\n * `localMiniappRuntime.forwardEvent`, with this coordinator providing the\n * subscription-active gate so we never publish transcripts to miniapps that\n * aren't asking for them. LocalMiniappRuntime filters mixed local/cloud\n * delivery per miniapp.\n */\n/**\n * Why local STT is currently active, mirrored into the\n * `local_stt_fallback_reason` setting (\"\" while inactive) so UI can show it.\n * When several causes hold at once, the primary-path outage wins over\n * `force_local` (a forced subscription would keep local STT on either way).\n */\nexport type LocalSttFallbackReason =\n  | \"force_local\"\n  | \"cloud_disconnected\"\n  | \"cloud_disabled\"\n  | \"stt_quota\"\n  | \"provider_unreachable\"\n\nclass LocalSttFallbackCoordinator {\n  private static instance: LocalSttFallbackCoordinator\n\n  private hasTranscriptionSubscription = false\n  private hasForceLocalSubscription = false\n  private activeLanguage: string | null = null\n  /**\n   * Default to \"cloud is up\" so we never accidentally activate local STT before\n   * the cloud client has had a chance to start. We attach lazily on the first\n   * subscription/reconcile pass; once attached, this field reflects the real\n   * cloud-client runtime status.\n   */\n  private cloudConnected = true\n  private localActive = false\n  private cloudAdapterAttached = false\n  /**\n   * Soniox-direct (user API key) state, pushed by SonioxDirectService. While\n   * enabled, IT is the primary transcription path — cloud connectivity is\n   * irrelevant and sherpa engages on Soniox health instead. Defaults healthy\n   * for the same reason cloudConnected defaults true: never activate local STT\n   * before the primary has had a chance to come up.\n   */\n  private sonioxDirectEnabled = false\n  private sonioxDirectHealthy = true\n  /**\n   * Cloud STT refused for plan quota (`stream.quota` blocked=true). The cloud\n   * connection stays up, so this is tracked separately from `cloudConnected`:\n   * for transcription purposes the cloud path is down, and sherpa takes over\n   * if its model is on-device. Soniox-direct is unmetered and unaffected.\n   */\n  private sttQuotaBlocked = false\n\n  private constructor() {\n    // Reset the persisted mirror flag on boot — the in-memory state in this\n    // coordinator is the source of truth, and a stale \"true\" left from the\n    // previous session would cause native to feed Sherpa before any miniapp\n    // registered a subscription.\n    useSettingsStore.getState().setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackActive, false)\n    useSettingsStore.getState().setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackReason, \"\")\n  }\n\n  /**\n   * Lazy-attach the engine cloud connection listener. The coordinator is\n   * constructed at module load, before engine.start() brings up the cloud\n   * client, so we defer until the first reconcile.\n   */\n  private attachCloudAdapterIfReady(): void {\n    if (this.cloudAdapterAttached) return\n    this.cloudConnected = cloudClientService.isConnected()\n    cloudClientService.onStatusChanged((status) => {\n      const connected = status.status === \"connected\"\n      if (this.cloudConnected === connected) return\n      this.log(`cloud connection -> ${connected ? \"up\" : \"down\"}`)\n      this.cloudConnected = connected\n      void this.reconcile()\n    })\n    this.cloudAdapterAttached = true\n  }\n\n  static getInstance(): LocalSttFallbackCoordinator {\n    if (!LocalSttFallbackCoordinator.instance) {\n      LocalSttFallbackCoordinator.instance = new LocalSttFallbackCoordinator()\n    }\n    return LocalSttFallbackCoordinator.instance\n  }\n\n  isActive(): boolean {\n    return this.localActive\n  }\n\n  getActiveLanguage(): string | null {\n    return this.activeLanguage\n  }\n\n  /** The cause of the current activation, or null while inactive. */\n  getReason(): LocalSttFallbackReason | null {\n    return this.localActive ? this.currentReason() : null\n  }\n\n  onSubscriptionChange(hasTranscription: boolean, language: string | null, hasForceLocal = false): void {\n    this.log(`onSubscriptionChange(hasTx=${hasTranscription}, lang=${language}, forceLocal=${hasForceLocal})`)\n    this.hasTranscriptionSubscription = hasTranscription\n    this.hasForceLocalSubscription = hasTranscription && hasForceLocal\n    this.activeLanguage = hasTranscription ? language : null\n    void this.reconcile()\n  }\n\n  /**\n   * Informational hook, retained for API stability. No longer called: the\n   * authoritative switching signal is the cloud-client adapter (local miniapps\n   * are powered only by V2). v1 cloud transcripts deliberately do NOT drive this\n   * coordinator anymore. Kept for future hysteresis if connection-state alone\n   * proves too coarse.\n   */\n  onCloudTranscript(): void {}\n\n  /**\n   * Pushed when the cloud announces/clears an STT quota block. Awaitable so\n   * the caller can inspect `isActive()` afterwards to phrase its user notice\n   * (\"continuing on-device\" vs \"transcription paused\").\n   */\n  async onSttQuotaBlockedChange(blocked: boolean): Promise<void> {\n    if (this.sttQuotaBlocked === blocked) return\n    this.log(`stt quota -> ${blocked ? \"blocked\" : \"restored\"}`)\n    this.sttQuotaBlocked = blocked\n    await this.reconcile()\n  }\n\n  isSttQuotaBlocked(): boolean {\n    return this.sttQuotaBlocked\n  }\n\n  /** Pushed by SonioxDirectService on every enable/health transition. */\n  onSonioxDirectStateChange(enabled: boolean, healthy: boolean): void {\n    if (this.sonioxDirectEnabled === enabled && this.sonioxDirectHealthy === healthy) return\n    this.log(`soniox-direct -> enabled=${enabled} healthy=${healthy}`)\n    this.sonioxDirectEnabled = enabled\n    this.sonioxDirectHealthy = healthy\n    void this.reconcile()\n  }\n\n  /** Whether the primary transcription path (Soniox-direct when a user key is\n   *  set, the cloud otherwise) is up. */\n  private primaryUp(): boolean {\n    // Cloud turned off in Privacy settings: the cloud path is not merely down,\n    // it is never coming back, so on-device STT is the primary. Checked ahead\n    // of `cloudConnected` because that field defaults to true (so local STT\n    // doesn't pre-empt cloud at boot) and would otherwise report a path that\n    // will never connect as up. Soniox-direct is a user-supplied third-party\n    // key, not Glassly cloud, so it stays available.\n    if (!this.sonioxDirectEnabled && cloudClientService.isCloudDisabled()) return false\n    return this.sonioxDirectEnabled ? this.sonioxDirectHealthy : this.cloudConnected && !this.sttQuotaBlocked\n  }\n\n  private async reconcile(): Promise<void> {\n    this.attachCloudAdapterIfReady()\n    const shouldBeActive = this.shouldUseLocalStt()\n    if (shouldBeActive && !this.localActive) {\n      await this.startLocalStt()\n    } else if (!shouldBeActive && this.localActive) {\n      this.stopLocalStt(this.hasTranscriptionSubscription ? \"primary transcription recovered\" : \"subscription gone\")\n    } else if (shouldBeActive && this.localActive) {\n      // Still active, but the cause may have shifted (e.g. quota block landing\n      // while already offline for a disconnect) — keep the mirror current.\n      this.publishReason()\n    }\n  }\n\n  /**\n   * Ranks the concurrent causes: a dead-forever cloud path first, then the\n   * primary provider's own failure, then transient outages, with `force_local`\n   * only when the primary is actually up. Mirrors `primaryUp()`.\n   */\n  private currentReason(): LocalSttFallbackReason {\n    if (!this.sonioxDirectEnabled && cloudClientService.isCloudDisabled()) return \"cloud_disabled\"\n    if (this.sonioxDirectEnabled && !this.sonioxDirectHealthy) return \"provider_unreachable\"\n    if (!this.sonioxDirectEnabled && !this.cloudConnected) return \"cloud_disconnected\"\n    if (!this.sonioxDirectEnabled && this.sttQuotaBlocked) return \"stt_quota\"\n    return \"force_local\"\n  }\n\n  private publishReason(): void {\n    const reason = this.localActive ? this.currentReason() : \"\"\n    const store = useSettingsStore.getState()\n    if (store.getSetting(ISLAND_SETTINGS_KEYS.localSttFallbackReason) !== reason) {\n      store.setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackReason, reason)\n    }\n  }\n\n  private async startLocalStt(): Promise<void> {\n    this.log(\"starting local stt\")\n    const modelAvailable = await sttModelManager.isModelAvailable()\n    if (!modelAvailable) {\n      this.log(\"local stt model is not available yet — skipping activation\")\n      return\n    }\n    if (!this.shouldUseLocalStt()) {\n      this.log(\"local stt activation skipped: routing changed before start completed\")\n      return\n    }\n    try {\n      // Direct btsdk call now (was a host restartTranscriber hook).\n      await BluetoothSdk.restartTranscriber()\n    } catch (err) {\n      this.log(`restartTranscriber failed: ${err}`)\n    }\n    if (!this.shouldUseLocalStt()) {\n      this.log(\"local stt activation skipped: routing changed during transcriber restart\")\n      return\n    }\n    useSettingsStore.getState().setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackActive, true)\n    this.localActive = true\n    this.publishReason()\n  }\n\n  private stopLocalStt(reason: string): void {\n    this.log(`stopping local stt: ${reason}`)\n    useSettingsStore.getState().setSetting(ISLAND_SETTINGS_KEYS.localSttFallbackActive, false)\n    this.localActive = false\n    this.publishReason()\n  }\n\n  private shouldUseLocalStt(): boolean {\n    return this.hasTranscriptionSubscription && (this.hasForceLocalSubscription || !this.primaryUp())\n  }\n\n  private log(msg: string): void {\n    console.log(`[LocalSttFallback] ${msg}`)\n  }\n}\n\nconst localSttFallbackCoordinator = LocalSttFallbackCoordinator.getInstance()\nexport default localSttFallbackCoordinator\n"]}

package/build/services/MapboxTokenService.d.ts

@@ -0,0 +1,33 @@
+/** The user-supplied Mapbox key from Settings > Keys ("" = not set). */
+export declare function userMapboxApiKey(): string;
+/**
+ * The token for phone-side DIRECT Mapbox REST calls: the user's key or
+ * nothing. Empty means "route the operation through the cloud maps proxy
+ * instead" (see NavigationHandlers) — the cloud-served org token is
+ * deliberately not used for direct REST from the phone.
+ */
+export declare function resolveMapboxAccessToken(): string;
+/**
+ * The token for the consumers that cannot be proxied (map tiles, native nav
+ * SDK): user key first, else the cloud-served public render token (cached
+ * with a TTL, in-flight-deduped). "" when neither source yields one — the
+ * caller must surface that as a failure. Never fetches while Glassly Cloud is
+ * disabled: cloud-off + no user key is a deliberate hard stop.
+ */
+export declare function resolveMapboxRenderToken(): Promise<string>;
+/** Test hook: drop the cached cloud render token. */
+export declare function resetCloudRenderTokenCache(): void;
+/**
+ * Cheap key validation for the Keys screen: GET /tokens/v2 with the candidate
+ * token. Mapbox answers 200 `{code: "TokenValid"}` for a live token and
+ * 401 with TokenMalformed/TokenInvalid/TokenExpired otherwise — no metered
+ * API usage. Network failure → indeterminate (the caller may offer
+ * "save anyway").
+ */
+export declare function validateMapboxApiKey(apiKey: string): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    reason: "invalid_key" | "network";
+}>;
+//# sourceMappingURL=MapboxTokenService.d.ts.map

package/build/services/MapboxTokenService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MapboxTokenService.d.ts","sourceRoot":"","sources":["../../src/services/MapboxTokenService.ts"],"names":[],"mappings":"AAkCA,wEAAwE;AACxE,wBAAgB,gBAAgB,IAAI,MAAM,CAGzC;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,MAAM,CAAC,CAiChE;AAED,qDAAqD;AACrD,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAC,EAAE,EAAE,IAAI,CAAA;CAAC,GAAG;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAA;CAAC,CAAC,CAUtE"}